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METHOD AND DEVICE FOR TESTING THE INHIBIT FUNCTION OF A 
NETWORK COMPONENT TRANSMISSION INHIBITING DEVICE 



• Relatcd -Ajrt 



The present invention relates to a method and a device for 
testing the inhibit function of a network component 
5 transmission inhibiting device that allows a transmission line 
from the network component to the network to be inhibited by 
an inhibit function which causes. a logical signal to be 
applied to a first node. 

l -0 10 Although applicable to arbitrary networks, the present 

py invention and its underlying problem are explained with regard 

to a network component transmission inhibiting device of a 
m network that is located on board a motor vehicle, namely the 

;; m CAN transmission inhibit function (CANSTOP) of the real-time 

liH 15 capable serial bus system "Controller Area Network" (CAN). 

□ In modern motor vehicles, provision is made for network 

==rf components (control units, sensor devices, actuator devices) 

having unique addresses and linked over a bus such as the CAN 
20 bus, the network components being able to exchange messages 

having a clear assignment between the same. 

An example of such a network component is a proximity control 
device which is used in a motor vehicle for automatic 
25 proximity control. 

The underlying problem of the present invention lies generally 
in that, in certain cases, it is required to decouple such a 
network component from the network or to inhibit its 
30 transmission function to the network by a safety device in the 
form of network component transmission inhibiting device. 

Fig. 2 shows such a known transmission inhibiting device for a 
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CAN network component. 



In Fig. 2, [reference numeral] 100 designates a vehicle CAN 
bus, 10 [designates] a controller of a proximity control 
device, 20 a transmission inhibit signal generating device, 15 
a CAN control section of controller 10 (usually a 
microcontroller) , 151 a TX transmission port of CAN control 
section 15, 152 an RX receive port of CAN control section 15, 
30 a CAN transmission/receiving device, TX a transmission 
line, RX a receive line, CANH a CAN high-level line, CANL a 
CAN low-level line, SI a switch, SS an inhibit signal line, Kl 
a first node, R a resistance, and V+ a supply potential. 

During normal operation, controller 10, via its CAN control 
section 15, sends signal messages over unidirectional 
transmission line TX to CAN transmission/receiving device 30 
from where, via CAN high-level line CANH and CAN low-level 
line CANL, the signal messages^to the remaining network 
components over vehicle CAN bus 100. Likewise, the 
controller, via unidirectional receive line RX, receives 
signal messages which are addressed to it from CAN 
transmission/receiving device 30. 

With the assistance of transmission inhibit signal generating 
device 20, which, in the present example, is a digital signal 
processor (DSP) it is possible for faults to be detected in 
controller 10, either directly via a link (not shown) or 
indirectly via other components (not shown either) . 

In response thereto, transmission inhibit signal generating 
device 20 outputs an inhibit signal to switch SI via inhibit 
signal line SS, the inhibit signal closing the switch and, 
consequently, connecting first node Kl on transmission line TX 
to supply potential V+. Because of this, transmission line TX 
is constantly at a logical "1" or "H" level, resulting in that 
no data, i.e., level variations H->L or L->H, can be 
transmitted. Consequently, the link of controller 10 to 
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vehicle CAN bus 100 is inhibited and, therefore, unwanted or 
unpredictable reactions of other network components on vehicle 
CAN bus 100, for example, in the form of control units, can be 
prevented. 

In this context, resistance R, which is located between first 
node' Kl and transmission port 151 connected to transmission 
line TX protects TX transmission port 151 from supply 
potential V+. 

In the above^ - known design approach, it has turned out to be a 
disadvantage that this transmission inhibiting device, which 
is composed of transmission inhibit signal generating device 
20, inhibit signal line SS, switch SI and supply potential V+, 
cannot be tested by controller 10 without an additional 
testing device j^r^n^KTrrnrte ^ he - rctofor -e since the reaction 
in appertaining CAN control section 15, which is usually an 
integral component of the controller, does not furnish any 
clear conclusions in the OK case of the transmission 
inhibiting device . 

In particular, the OK case (transmission inhibiting device 
works) cannot be distinguished from the case in which the CAN 
bus connection to controller 10 is interrupted, i.e., for 
example, in which transmission line TX and/or receive line RX 
and/or CAN high-level line CANH and/or CAN low-level line CANL 
is/are interrupted or transmission/receiving device 30 has a 
defect . 

Since in both cases, CAN control section 15 generates the same 
fault flags or markers in its internal evaluable registers if, 
in response to an attempt to transmit a signal message over 
transmission line TX, it does not receive an acknowledge 
response via receive line RX within a certain time. In other 
words, in all these cases, it detects the presence of a 
decoupling from vehicle CAN bus 100. 
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Consequently, ^-treti-a-i methods using an additional device are 
disadvantageous in so far as they require a large expense and 
operating effort. 

^Adva ntagco of ther IiivanLio fi 



The testing method according to the present invention 4*a^firtg- 
^e-£eate£€5 of claim— i— a~s well as the corresponding testing 
device atrce^dij^g- to cla r±nr^5 have the advantage over the^ fen o v m 
design approach that they provide a simple internal way of 
testing the inhibit function without requiring an external 
intervention in the respective network component itself. 

No additional hardware is required since the method is very 
simple and needs very little computing time. In other words, a 
minimum software overhead is sufficient. Also, the method 
works without the cooperation with the remaining network 
components, i.e., without the bus connection itself. 

The basic idea of the present invention is that a feedback 
loop is laid from the transmission line to the network 
component, the feedback loop, during activated inhibit 
function, making it possible to distinguish between a 
malfunction of the network component transmission inhibiting 
device and an interruption of the CAN bus connection to the 
controller. In the first case, in fact, a predetermined test 
signal message is fed back to the network component whereas in 
the second case, it is not. 

Advantag eous -^ mbodim eftt-s— -atKi^l^nprcrvem eiiLb are found -iru-t-he 
^especTtve — sub^ia-ifttsr. 



According t o ^a— p^r-e-fy i r^ed embodiment, the potential of the 
transmission line is tapped at a second node which is located 
between the first node and the transmission port of the 
network component, the transmission port being connected to 
the transmission line. This has the advantage that t-h-e—se-eomf 
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&od@, the closer 4rfe is located to the transmission port, the 
more insensitive it is -it-self to a potential electrical 
interruption . 

In another proforE sd embodiment, the network component is a 
controller, in particular, a microcontroller having an 
interrupt function which can be controlled via an interrupt 
port. In this *pref e ^ecj case, the tapped potential is fed back 
to the interrupt port, and the inhibit function is tested by 
analyzing whether or not an interrupt is triggered- Utilizing 
an interrupt means having no loss of computing time since the 
controller hardware responds to an edge change with an 
interrupt signal. 

According to a further gH?erfe*H?ed embodiment, the network 
component is a controller, in particular a microcontroller, 
having a scannable input port- In this .p^re-fer-Fed case, the 
tapped potential is fed back to the scannable input port, and 
the inhibit function is tested by analyzing the signal at the 
scanned input port. Here, polling is used which means that the 
controller pin is permanently interrogated. During this time, 
-ia— <$&n&&&rl , no other processor computing function can indeed 
be carried out but no interrupt-capable controller port is 
required either, which, in many applications, does actually 
not exist - 

According to another .prefaced embodiment, the logical signal 
is applied to the first node by closing a switch which is 
located between the first node and a supply potential. 

An-JEStefflp^ra^y—effi of - the pr oco n t^-irn-veirbirg^ 

t h o drawings — aitd— e xplain ed— i-a—gire a L e r d^^ad^r^n^trhe^f^.l.lo-wdng^ 

de-s-ci iplTuifT 

Fig. 1 shows a testing device for a known transmission 
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inhibiting device for a CAN network^omponent^- 
exemplary embodiment of the present invent ion ^*^>ncU 

Fig. 2 shows the known transmission inhibiting device for a 
CAN network component. 

=£e^G ripti o u of Lhe Ex emplary embodiments 

Fig. 1 shows a testing device for a^fcrrewft. transmission 
inhibiting device for a CAN network component as exemplary 
embodiment of the present invention, identical reference 
symbols as in Fig. 1 designating identical or functionally 
identical elements . 



In Fig. 1, in addition to the reference symbols already 
introduced, CSM designates a test signal line, INT an 
interrupt port of controller 10, and K2 a second node. 

In the exemplary embodiment, provision is made for a test 
signal line CSM for tapping the potential of transmission line 
TX at second node K2 which is located between first node Kl 
and transmission port 151 of network component 10 in the form 
of the controller, the transmission port being connected to 
transmission line TX. The test signal line carries the 
potential of transmission line TX tapped at node K2 to 
interrupt port INT. 

In the illustrated exemplary embodiment, the testing method 
operates as follows. 

During a test, transmission inhibit signal generating device 
20 in the form of the digital signal processor activates the 
inhibit function in response to a prompt by controller 10. 

If the transmission inhibiting device, which is composed of 
transmission inhibit signal generating device 20, inhibit 
signal line SS, switch SI and supply potential V+, altogether 
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works, this activation causes logical signal H to be applied 
to first node Kl and, consequently, inhibits transmission line 
TX. However, if a component of the transmission inhibiting 
device is defective, no inhibition takes place. 

To test this, controller 10 thereupon transmits a 
predetermined test signal message, for example, a simple 
signal level transition (H->L) , to the network via 
transmission line TX during the inhibit function activated in 
response to a prompt by the controller. The test signal 
message is expediently configured in such a manner that it is 
plausible and, consequently, cannot disturb other network 
components, in particular control units in case the inhibit 
function does not work (NOK case) . 

Then, the inhibit function is tested by analyzing the tapped 
potential fed back to interrupt port INT during the 
transmission of the predetermined test signal message. If the 
transmission inhibiting device works correctly, no data 
reaches interrupt port INT of controller 10, i.e., no 
interrupt is triggered. If the transmission inhibiting device 
is defective, then an interrupt is triggered since the 
permanent application of logical signal H to first node Kl 
does not happen, and signal level transition (H->L) mentioned 
as an example can therefore occur. 

The information obtained in this manner makes it possible to 
unequivocally recognize a properly working inhibit function. 

Although the present invention is described above on the basis 
of a preferred exemplary embodiment, it is not limited thereto 
but can be modified in many ways. 

In particular, it is possible for the testing device according 
to the present invention to be used not only for CAN modules 
on board of a motor vehicle but for any network having 
arbitrary network components. 
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Also, the potential tap at node K2^ e an in pi.lnolpl c be located 
at a different point of transmission line TX; however, 
expedient is an arrangement which is located very closely 
behind TX transmission port 151 or upstream of transmission 
port 151 in the CAN control unit itself so that the 
probability of an interruption upstream of (i.e., in Fig. 1, 
to the left of) node K2, which cannot be detected by this 
method, is kept extremely low. 

The tapped potential of transmission line TX needs not 
necessarily be fed back to an interrupt-capable controller 
port .^^--pirincrip-Jre^ — a-n-y controller port that can be 
interrogated or polled, preferably by software, for a level 
variation is suitable for this. 
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